Predicate Routing: Enabling Controlled Networking Timothy Roscoe Intel Research at Berkeley 2150 Shattuck Avenue, Berkeley, CA 94704, USA Steve Hand University of Cambridge Computer Laboratory Cambridge CB3 0FD, UK troscoe@intel-research.net Rebecca Isaacs Microsoft Research 7 J.J. Thomson Avenue Cambridge CB3 0FB, UK steven.hand@cl.cam.ac.uk Richard Mortier Paul Jardetzky Sprint ATL 1 Adrian Court Burlingame, CA 94010, USA Microsoft Research 7 J.J. Thomson Avenue Cambridge CB3 0FB, UK risaacs@microsoft.com mort@microsoft.com pjardetzky@sprintlabs.com 1. INTRODUCTION AND MOTIVATION The Internet lacks a coherent model which uni es security (in terms of where packets are allowed to go) and routing (where packets should be sent), even in constrained environments. While automated con guration tools are appearing for parts of this problem, a general solution is still unavailable. Routing and rewalling are generally treated as separate problems, in spite of their clear connection. In particular, security policies in data hosting centers, enterprise networks, and backbones are still by and large installed manually, and are prone to problems from errors and miscon gurations. In this paper, we present Predicate Routing (PR) as a solution to this problem. We brie y describe our centralized implementation and then outline the extension of Internet routing protocols to support Predicate
/lp/association-for-computing-machinery/predicate-routing-enabling-controlled-networking-2UgFmA790L